CVE-2018-11531: Out-of-bounds Write

Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp...

Google Android 'address' parameter has unspecified vulnerability

Android is a Linux-based open-source operating system jointly developed by Google and the Open Handheld Alliance OHA for short, and Qualcomm MDM9625 and other central processing unit CPU products from Qualcomm are used in different platforms. A security vulnerability exists in the Qualcomm...

PT-2018-2292 · Exiv2 +3 · Exiv2 +3

Name of the Vulnerable Software and Affected Versions: Exiv2 version 0.26 Description: The issue is related to a heap-based buffer overflow in the getData function, located in preview.cpp, which can be exploited by a remote attacker using a specially crafted malicious file. This could potentially...

PT-2018-4455

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is related to a lack of address argument validation on calls to the qsee prng getdata syscall in certain Qualcomm Snapdragon processors. This affects Android devic...

Ecava IntegraXor Report getdata name SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Ecava IntegraXor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the name parameter provided to the getdata page. The issue...

PT-2017-14537

Name of the Vulnerable Software and Affected Versions Ecava IntegraXor versions 6.1.1030.1 and prior Description A SQL Injection issue was discovered, which generates an error in the database log. This issue allows for potential information disclosure. Recommendations For versions 6.1.1030.1 and...

CVE-2017-12779

The NodeGetData function in corec/corec/node/node.c in mkvalidator 0.5.1 allows remote attackers to cause a denial of service Null pointer dereference and application crash via a crafted mkv file...

PT-2017-12686

Name of the Vulnerable Software and Affected Versions mkvalidator version 0.5.1 Description The issue allows remote attackers to cause a denial of service, resulting in a null pointer dereference and application crash, by providing a crafted mkv file. This is due to a problem in the Node GetData...

mkvalidator 'Node_GetData' Function Denial of Service Vulnerability

mkvalidator is a command line tool from the Matroska team for verifying that Matroska and WebM files are canonical. A security vulnerability exists in the 'NodeGetData' function in the corec/corec/node/node.c file in mkvalidator version 0.5.1. A remote attacker can exploit this vulnerability to...

Schneider Electric U.motion Builder track_getdata Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Schneider Electric U.motion Builder. No authentication is required to exploit this vulnerability. A remote code execution vulnerability exists in Schneider Electric U.motion Builder trackgetdata. T...

elfutils '__libelf_set_rawdata_wrlock' function denial of service vulnerability

elfutils is a collection of utilities and libraries for reading, creating and modifying ELF binaries. A denial of service vulnerability exists in the libelfsetrawdatawrlock function in elfutils's elfgetdata.c. A remote attacker could use this vulnerability to cause a denial of service via a...

CVE-2017-6550: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Kinsey Infor-Lawson formerly ESBUS allow remote attackers to execute arbitrary SQL commands via the 1 TABLE parameter to esbus/servlet/GetSQLData or 2 QUERY parameter to KKLS9ReportingPortal/GetData...

PT-2017-17149

Name of the Vulnerable Software and Affected Versions Infor-Lawson formerly ESBUS versions affected versions not specified Description The issue concerns SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands. This can be achieved via the TABLE parameter to th...

Ecava IntegraXor 5.0.413.0 getdata Requests Handling Multiple SQLi

Binary data scadaappecavaintegraxor527222.nbin...

PT-2017-9622

Name of the Vulnerable Software and Affected Versions Ecava IntegraXor version 5.0.413.0 Description The issue concerns SQL injection vulnerability in the Ecava IntegraXor web server. Specifically, parameters are not properly sanitized, which could allow an attacker to execute read, write, and...

Ecava IntegraXor getdata name SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Ecava IntegraXor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the name parameter in getdata requests. The issue lies in the failure...

Ecava IntegraXor getdata param SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Ecava IntegraXor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the param parameter in getdata requests. The issue lies in the failur...

PT-2017-9738

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.5 Description The issue allows remote attackers to cause a denial of service, specifically a NULL pointer dereference, by using a crafted BMP image in an imginfo command. This is due to a problem in the bmp getda...

PT-2017-9856

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.9 Description The issue allows remote attackers to cause a denial of service by calling the imginfo command with a crafted BMP image, resulting in a NULL pointer dereference in the bmp getdata function...

Sql injection

SQL injection vulnerability in TrackItWeb/Grid/GetData in BMC Track-It! 11.3.0.355 allows remote authenticated users to execute arbitrary SQL commands via crafted POST data...